AZ-900, an entry-level Microsoft Azure certification, displays a user's familiarity with Azure service offerings such as storage, virtual machines, databases, and developer tools. Microsoft Azure allows users to leverage the infrastructure of an existing cloud provider computing environment to reduce or even eliminate on-premises solutions. In this 14-video course, you will learn how to secure Azure networks by using virtual networks (VNets) and Azure Firewall Key Vault, as well as many other Azure network security options. Watch a demonstration of how the Azure portal creates and configures a network security group (NSG). Next, learn how configuring a virtual machine in Azure with just-in-time access can further harden virtual machines. In the closing exercise, learners must describe how security is enhanced when one uses the Azure Firewall and uses Azure DDoS mitigation; and how security is enhanced by using NSGs. Then you will be directed to create an NSG by using the portal, and create a similar group by using the command-line interface.
Azure Fundamentals: Azure Network Security